What log shows a rogue device?

A rogue device can typically be identified in network logs such as DHCP logs, which may show unauthorized IP address assignments, or ARP logs, which can reveal unexpected MAC addresses on the network. Additionally, intrusion detection system (IDS) logs may flag suspicious activity related to unknown devices trying to communicate on the network. Monitoring network traffic logs for unusual patterns or connections can also help in detecting rogue devices.